@earnaha/auth0-action-helper
Version:
AHA auth0 action helper
420 lines (394 loc) • 15.2 kB
JavaScript
/* eslint-disable max-len */
const {
describe,
beforeEach,
beforeAll,
afterEach,
expect,
it,
jest,
} = require('@jest/globals');
const axios = require('axios');
const AxiosMockAdapter = require('axios-mock-adapter');
const PreUserRegistrationHelper = require('../pre.user.registration.js');
describe('PreUserRegistrationHelper Class', () => {
const nowTime = new Date('2023-09-27T16:19:22.123Z');
const envConfig = {
ENV: 'local',
SERVICE: 'aha-local',
DOMAIN: 'https://1f53-2401-e180-8814-4076-522b-1a24-60e4-9edd.ngrok-free.app',
ACCESS_KEY: 'oJucsRNjCnczrAVsIUZxXNYSh',
ACCESS_SALT: '4479748907',
AUTH0_DOMAIN: 'https://aha-local.jp.auth0.com',
AUTH0_CLIENT_ID: 'rR5hZwRTU5PeTQ9iCVtsNrLYS45PaeMY',
AUTH0_CLIENT_SECRET:
'kJR-aAjiUWwcaF-f9JfVaiaePNLnxNL60R2plM2cljPDlmzIGBsv_JYhLRsaJlh0',
SENTRY_DSN: '',
SENTRY_TRACES_SAMPLE_RATE: '0.1',
SENTRY_LOGGER_LEVEL: 'debug',
LINK_ACCOUNT_TIME: '2022-04-22',
OPEN_SEARCH_NODE:
'https://logger:wkb.xdg2ugx3dew!RZV@search-earnaha-log-p5zmiz3blqoub4f43lr4a34wwe.ap-northeast-1.es.amazonaws.com',
};
const users = {
namePwdAuth: {
id: '79ceeb5f-bb6a-469b-93d0-8a077290fc61',
auth0Id: 'auth0|6423f2abe532c863e93f677a',
email: 'jest.ut+2023032903@avancevl.com',
nickname: 'jest.ut+2023032903',
name: 'jest.ut+2023032903',
picture:
'https://s.gravatar.com/avatar/7e5f83cbf99e60c27c73074279c1b8b4?s=480&r=pg&d=https%3A%2F%2Fcdn.auth0.com%2Favatars%2Fje.png',
loginsCount: 1,
lastIp: '2403:c300:5558:1a86:ebd1:7e49:e45e:2963',
emailVerified: false,
language: null,
appMetadata: {},
userMetadata: {},
roles: ['student'],
identities: [
{
connection: 'Username-Password-Authentication',
isSocial: false,
provider: 'auth0',
user_id: '6423f2abe532c863e93f677a',
},
],
geoip: {
cityName: 'Taoyuan District',
continentCode: 'AS',
countryCode3: 'TWN',
countryCode: 'TW',
countryName: 'Taiwan',
latitude: 24.9889,
longitude: 121.3176,
subdivisionCode: 'TAO',
subdivisionName: 'Taoyuan',
timeZone: 'Asia/Taipei',
},
lastLoginAt: null,
Memberships: null,
updatedAt: '2023-08-23T03:45:33.758Z',
createdAt: '2023-08-23T03:45:33.758Z',
lastPasswordResetAt: null,
},
thirdPartyAuth: {
id: '23f253bf-2524-498f-9aa0-a9e594793942',
auth0Id: 'auth0|q0ugvfad7scksuczsw3fpxxl',
email: 'jest.ut+20240429@avancevl.com',
nickname: 'student.a',
name: 'Magdalena.Russel',
picture: null,
loginsCount: 3,
lastIp: null,
emailVerified: true,
appMetadata: null,
userMetadata: {},
roles: ['student'],
identities: [
{
access_token:
'ya29.a0AWY7CknGEOnVD-7zqcCjysZXCTJyYituZ5eaXTc4zmCW-iG2Na-4vyCwl9rHJ1T0uB0oqPRC2fmQKY0-wlU1AxYGnnwXBnaZIJKmGB2ygPbLSxjP0uVOe7gKum0OEzLN9KZSx6_AL0BMhjSQWIC0co7hQQyH2LUaCgYKAdISARMSFQG1tDrpRFvzPkX6hhpGK7DLZYsOFg0166',
connection: 'google-oauth2',
expires_in: 3599,
isSocial: true,
profileData: {
email: 'jest.ut+20240429@avancevl.com',
email_verified: true,
family_name: 'konopelski',
given_name: 'krystel',
locale: 'zh-TW',
name: 'krystel konopelski',
picture:
'https://lh3.googleusercontent.com/a/AGNmyxYotR-HeDwWbj-awKJYNKnsZiVoztJ_2_9VoSAL=s96-c',
},
provider: 'google-oauth2',
user_id: 'q0ugvfad7scksuczsw3fpxxl',
},
],
language: null,
geoip: null,
lastLoginAt: '2023-02-04T10:34:02.968Z',
lastPasswordResetAt: null,
createdAt: '2023-01-24T09:40:08.315Z',
updatedAt: '2023-02-04T10:34:02.968Z',
},
};
// https://auth0.com/docs/customize/actions/flows-and-triggers/pre-user-registration-flow/event-object
const auth0ActionEvent = {
namePwdAuth: {
request: {
method: 'POST',
ip: '2403:c300:4553:52bd:7852:6cc3:73fd:3a6c',
geoip: {
cityName: 'Banqiao',
continentCode: 'AS',
countryCode3: 'TWN',
countryCode: 'TW',
countryName: 'Taiwan',
latitude: 25.0104,
longitude: 121.4684,
subdivisionCode: 'NWT',
subdivisionName: 'New Taipei',
timeZone: 'Asia/Taipei',
},
hostname: 'aha-local.jp.auth0.com',
language: 'en-US,en;q=0.9',
user_agent:
'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36',
body: {},
},
transaction: {
acr_values: [],
locale: 'en',
requested_scopes: ['openid', 'email', 'profile'],
ui_locales: [],
protocol: 'oidc-basic-profile',
},
connection: {
id: 'con_86C3Ae0EGriXeOyV',
strategy: 'auth0',
name: 'Username-Password-Authentication',
metadata: {},
},
tenant: { id: envConfig.SERVICE },
configuration: {},
secrets: envConfig,
client: {
client_id: envConfig.AUTH0_CLIENT_ID,
metadata: {},
name: envConfig.SERVICE,
},
user: {
app_metadata: {},
email: users.namePwdAuth.email,
family_name: undefined,
given_name: undefined,
name: undefined,
nickname: undefined,
picture: undefined,
user_metadata: {},
username: undefined,
phone_number: undefined,
},
},
thirdPartyAuth: {
request: {
method: 'POST',
ip: '2403:c300:4553:52bd:7852:6cc3:73fd:3a6c',
geoip: {
cityName: 'Banqiao',
continentCode: 'AS',
countryCode3: 'TWN',
countryCode: 'TW',
countryName: 'Taiwan',
latitude: 25.0104,
longitude: 121.4684,
subdivisionCode: 'NWT',
subdivisionName: 'New Taipei',
timeZone: 'Asia/Taipei',
},
hostname: 'aha-local.jp.auth0.com',
language: 'en-US,en;q=0.9',
user_agent:
'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36',
body: {},
},
transaction: {
acr_values: [],
locale: 'en',
requested_scopes: ['openid', 'email', 'profile'],
ui_locales: [],
protocol: 'oidc-basic-profile',
},
connection: {
id: 'con_w9HTFNr7g0AQnnuc',
metadata: {},
name: 'google-oauth2',
strategy: 'google-oauth2',
},
tenant: { id: envConfig.SERVICE },
configuration: {},
secrets: envConfig,
client: {
client_id: envConfig.AUTH0_CLIENT_ID,
metadata: {},
name: envConfig.SERVICE,
},
user: {
app_metadata: {},
email: users.thirdPartyAuth.email,
family_name: users.thirdPartyAuth.family_name,
given_name: users.thirdPartyAuth.given_name,
name: users.thirdPartyAuth.name,
nickname: users.thirdPartyAuth.nickname,
picture: users.thirdPartyAuth.picture,
user_metadata: {},
username: undefined,
phone_number: undefined,
},
},
};
// https://auth0.com/docs/customize/actions/flows-and-triggers/pre-user-registration-flow/api-object
const auth0ActionApi = {
access: {
deny: jest.fn().mockImplementation((reason, userMessage) => ({
reason,
userMessage,
})),
},
cache: {
get: jest.fn().mockImplementation(key => key),
set: jest.fn().mockImplementation((key, value, options) => ({
key,
value,
options,
})),
delete: jest.fn().mockImplementation(key => key),
},
user: {
setUserMetadata: jest.fn().mockImplementation((name, value) => ({
name,
value,
})),
setAppMetadata: jest.fn().mockImplementation((name, value) => ({
name,
value,
})),
},
};
const serverAccessKey =
'b0p1Y3NSTmpDbmN6ckFWc0lVWnhYTllTaCswMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDArYWhhLWxvY2FsKzE3MDAyMDE5NjgwNTg=';
const auth0UserToken = {
data: {
access_token: `eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImMyNUVPdVRVNEtvQVZPczJjdXh2MiJ9.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.rHOgYOAG_HYlrUKey6j9nkKvyKwt8q_rVliqEZSBwoBjZ3CvEMDA1vXLPQLfGUHUw3S3R6SSPUSHIkSKsu2TOmHXVBPiTEd-cCap5_5oGWABrymRTfT4fPO6HyEvgBXAPAnh8tetLYp5jXvsreYt-qafaM7CWpwYryFxKO0-bEyUSEkWIfFdDwheT90QMgrvzve5FMHCMv7nna-DsqlFAYoGLAcqgQaB0wd_Ker7pypNmrzIX08KOggA0We3loPL5p5uiRZiwjT5-HKuFPxDgGqUSU-LNAbgkpUulZ3q95d1oVKEYY-nGAEsagdEAiExrgG9SQ_4dT35vVpUdED3pQ`,
},
};
let axiosMockAdapter;
let helper;
beforeAll(async () => {
axiosMockAdapter = new AxiosMockAdapter(axios);
});
beforeEach(async () => {
helper = new PreUserRegistrationHelper(envConfig);
helper.getServerAccessKey = jest
.fn()
.mockResolvedValue(serverAccessKey);
axiosMockAdapter
.onPost(`${envConfig.AUTH0_DOMAIN}/oauth/token`)
.reply(200, auth0UserToken.data);
});
afterEach(() => {
axiosMockAdapter.reset();
jest.restoreAllMocks();
});
it('Login by name-password-auth should success', async () => {
axiosMockAdapter
.onGet(
`${
envConfig.AUTH0_DOMAIN
}/api/v2/users-by-email?email=${encodeURIComponent(
users.namePwdAuth.email.toLowerCase(),
)}`,
)
.replyOnce(200, [users.namePwdAuth]);
jest.useFakeTimers().setSystemTime(nowTime);
const res = await helper.exec(
auth0ActionEvent.namePwdAuth,
auth0ActionApi,
);
expect(res).toEqual(undefined);
jest.useRealTimers();
});
it('Login by third-party-auth should success', async () => {
axiosMockAdapter
.onGet(
`${
envConfig.AUTH0_DOMAIN
}/api/v2/users-by-email?email=${encodeURIComponent(
users.thirdPartyAuth.email.toLowerCase(),
)}`,
)
.replyOnce(200, [users.thirdPartyAuth]);
jest.useFakeTimers().setSystemTime(nowTime);
const res = await helper.exec(
auth0ActionEvent.thirdPartyAuth,
auth0ActionApi,
);
expect(res).toEqual(undefined);
jest.useRealTimers();
});
it('Signup by name-password-auth should success', async () => {
axiosMockAdapter
.onGet(
`${
envConfig.AUTH0_DOMAIN
}/api/v2/users-by-email?email=${encodeURIComponent(
users.namePwdAuth.email.toLowerCase(),
)}`,
)
.replyOnce(200, []);
jest.useFakeTimers().setSystemTime(nowTime);
const res = await helper.exec(
auth0ActionEvent.namePwdAuth,
auth0ActionApi,
);
expect(res).toEqual(undefined);
jest.useRealTimers();
});
it('Signup by third-party-auth should success', async () => {
axiosMockAdapter
.onGet(
`${
envConfig.AUTH0_DOMAIN
}/api/v2/users-by-email?email=${encodeURIComponent(
users.thirdPartyAuth.email.toLowerCase(),
)}`,
)
.replyOnce(200, []);
jest.useFakeTimers().setSystemTime(nowTime);
const res = await helper.exec(
auth0ActionEvent.thirdPartyAuth,
auth0ActionApi,
);
expect(res).toEqual(undefined);
jest.useRealTimers();
});
it('Signup by third-party-auth with existing user should success', async () => {
axiosMockAdapter
.onGet(
`${
envConfig.AUTH0_DOMAIN
}/api/v2/users-by-email?email=${encodeURIComponent(
users.thirdPartyAuth.email.toLowerCase(),
)}`,
)
.replyOnce(200, [users.namePwdAuth]);
jest.useFakeTimers().setSystemTime(nowTime);
const res = await helper.exec(
auth0ActionEvent.thirdPartyAuth,
auth0ActionApi,
);
expect(res).toEqual(undefined);
jest.useRealTimers();
});
it('Signup by name-password-auth with existing user should deny', async () => {
axiosMockAdapter
.onGet(
`${
envConfig.AUTH0_DOMAIN
}/api/v2/users-by-email?email=${encodeURIComponent(
users.namePwdAuth.email.toLowerCase(),
)}`,
)
.replyOnce(200, [users.thirdPartyAuth]);
jest.useFakeTimers().setSystemTime(nowTime);
const res = await helper.exec(
auth0ActionEvent.namePwdAuth,
auth0ActionApi,
);
expect(auth0ActionApi.access.deny).toBeCalledTimes(2);
expect(res).toEqual(undefined);
jest.useRealTimers();
});
});